Dahua Firmware Mod Kit + Modded Dahua Firmware

[cor35vet]

bootloop again.
Not bookmarked the site for telnet username and password.

Same results as last time. I try to apply the chinese firmware again.

Did you flash DH_IPC-HX4XXX-Eos_Chn_EngHARD_PN_Stream3_V2.420.0000.22.R.20161209_BETA1.bin ?
This is almost the same as the original dahua firmare, getting a bootloop on that, wtf?
Try to telnet into the camera, port 2300 then "killall sonia" and run "sonia".

 

[marigo]

yesz, I flashed that version.

What was the user/password combination?

I see that login via configtool doens't work anymore. I saw in the configtool, in a few seconds, that something was modified. My password is being rejected.

 

[cor35vet]

Dahua Enable Telnet

User: admin
Password: 7ujMko0<YOURADMINPASSWORD>
(Without the <>)

 

[marigo]

Hmmm, connection refused on port 2300
This is weird.

 

[cor35vet]

Well I can't explain that. Is port 3800 up?
I feel trolled... I mean I could make a version that starts /bin/sh instead of /bin/login but I never had any problems with telnet so wtf.

 

[marigo]

Ok, my fault. for somehow 2 devices shared the same IP address. (something for later)
I have telnet access and killed en started sonia.

 

[cor35vet]

And now it runs or what, lol?...

Are you sure that wasn't a problem before aswell hahaha

 

[marigo]

23:09:41|[] info  tid:1069 [HSWX]  HSDeviceManager.cpp:56 CIHLDeviceManager::checkCECondition has Normal Network

23:09:41|[libNATTraver.a] info tid:1030 <P2PDevice.cpp:293>get server fail, retrying...
23:09:46|[NetApp-344729] warn tid:1010 tid:1010, key dhp2p121.41.5.2268800YXQ3Mahe-5H-R1Z_2H03E30PAA001411 current status is Offline. [S                                rc/P2P/P2P.cpp:742]
23:09:46|[libNATTraver.a] info tid:1030 <P2PDevice.cpp:267>device stop!
23:09:46|[libInfra] debug tid:1075 ThreadBody leave name = Link Through Server, id = 1075
23:09:46|[NetProt-372432] error tid:1018 Src/DdnsPrivateP2p.cpp:481, handle output timeout!
23:09:46|[NetApp-344729] debug tid:1018 tid:1018, CRegCliNew::msgRegister()>>>>start [Src/P2P/ASRegister.cpp:394]
23:09:46|[NetApp-344729] debug tid:1018 tid:1018, CRegCliNew::msgRegister()>>>>Timeout!Detail:ddns_timeout [Src/P2P/ASRegister.cpp:416]
23:09:46|[NetApp-344729] debug tid:1018 tid:1018, CRegCliNew::msgRegister()<<<<end [Src/P2P/ASRegister.cpp:425]
23:09:46|[NetApp-344729] debug tid:1076 tid:1076, CRegCliNew::doRegister()>>>>m_regStatus is false! [Src/P2P/ASRegister.cpp:301]
23:09:46|[libNATTraver.a] info tid:1010 <ProxyP2PClient.cpp:283>p2p client event destory! this[0x234f878]
23:09:46|[libNATTraver.a] info tid:1010 <ProxyP2PClient.cpp:55>CP2PClient::~CP2PClient() this:[0x234f878]!
23:09:46|[libInfra] debug tid:1074 ThreadBody leave name = Proxy Event Driver, id = 1074
23:09:50|[NetApp-344729] error tid:1013 tid:1013, getip failed! [Src/NetworkManager/NetworkManager.cpp:2278]
23:09:50|[NetApp-344729] debug tid:1013 tid:1013, CArpPingParser::Stop(). [Src/ARP/ArpPingParser.cpp:42]
23:09:50|[NetApp-344729] debug tid:1013 tid:1013, time out [Src/ARP/ArpPingParser.cpp:121]
23:09:50|[NetApp-344729] debug tid:1071 tid:1071, getaddrinfo result ipaddress 121.41.5.226. [Src/P2P/P2P.cpp:725]
23:09:50|[libNATTraver.a] info tid:1071 <ProxyServer.cpp:40>version information: major[3]minor[0]revision[0]build[354733]type[Beta]
23:09:50|[libNATTraver.a] info tid:1071 <ProxyServerImpl.cpp:241>set proxy option[Recv Buffer Size] value[524288]
23:09:50|[NetApp-344729] warn tid:1071 tid:1071, key dhp2p121.41.5.2268800YXQ3Mahe-5H-R1Z_2H03E30PAA001411 current status is Offline. [S                                rc/P2P/P2P.cpp:742]
23:09:50|[libInfra] debug tid:1080 ThreadBody Enter name = Link Through Server, id = 1080, prior = N64, stack = 0xb192fec4
23:09:50|[libInfra] debug tid:1079 ThreadBody Enter name = Proxy Event Driver, id = 1079, prior = N64, stack = 0xb1d2fec4
23:09:50|[libNATTraver.a] info tid:1030 <P2PDevice.cpp:258>device start!
23:09:50|[libNATTraver.a] info tid:1030 <Common.cpp:427>Send Request[-1753883924] to [121.41.5.226:8800] /online/p2psrv/2H03E30PAA00141
23:09:50|[NetApp-344729] debug tid:1013 tid:1013, close. [Src/ARP/ArpPingParser.cpp:113]
23:09:52|[NetApp-344729] error tid:1069 CWireless::no 3g modules found.
23:09:52|[] info  tid:1069 [HSWX]  HSDeviceManager.cpp:53 CIHLDeviceManager::checkCECondition GetInterfaces:
[[
   {
      "ConnStatus" : "Connected",
      "Name" : "eth0",
      "PhysicalAddress" : "e0:50:8b:08:86:33",
      "Speed" : 0,
      "Type" : "Normal",
      "Valid" : true
   }
]

]

23:09:52|[] info  tid:1069 [HSWX]  HSDeviceManager.cpp:56 CIHLDeviceManager::checkCECondition has Normal Network

23:09:53|[libNATTraver.a] info tid:1030 <P2PDevice.cpp:293>get server fail, retrying...
23:09:56|[NetApp-344729] warn tid:1076 tid:1076, key dhp2p121.41.5.2268800YXQ3Mahe-5H-R1Z_2H03E30PAA001411 current status is Offline. [S                                rc/P2P/P2P.cpp:742]
23:09:56|[NetApp-344729] debug tid:1010 tid:1010, Check()>>>> cha=[20],  m_lastRegStatus=[1], m_portchanged=[0] [Src/P2P/ASRegister.cpp:                                517]
23:09:56|[NetApp-344729] debug tid:1010 tid:1010, CRegCliNew::checkRegisterState()>>>>Need to Register! [Src/P2P/ASRegister.cpp:522]
23:09:56|[NetApp-344729] debug tid:1010 tid:1010, type IPC devid 2H03E30PAA00141 mac E0508B088633 oemid 0 username  version 2.420 privPo                                rt 37777 rtspPort 554 httpPort 80 password  server dhp2p webver 2.420.0 [Src/P2P/ASRegister.cpp:344]
23:09:56|[NetProt-372432] debug tid:1010 [getByNet:134]gethost from net www.dahuap2p.com <---> 223.6.252.231
23:09:56|[NetProt-372432] trace tid:1010 Src/DdnsPrivateP2p.cpp:117, m_register_timeout is:: 10000000
23:10:01|[NetApp-344729] warn tid:1076 tid:1076, key dhp2p121.41.5.2268800YXQ3Mahe-5H-R1Z_2H03E30PAA001411 current status is Offline. [S                                rc/P2P/P2P.cpp:742]
23:10:02|[NetApp-344729] error tid:1069 CWireless::no 3g modules found.
23:10:02|[] info  tid:1069 [HSWX]  HSDeviceManager.cpp:53 CIHLDeviceManager::checkCECondition GetInterfaces:
[[
   {
      "ConnStatus" : "Connected",
      "Name" : "eth0",
      "PhysicalAddress" : "e0:50:8b:08:86:33",
      "Speed" : 0,
      "Type" : "Normal",
      "Valid" : true
   }
]

]

23:10:02|[] info  tid:1069 [HSWX]  HSDeviceManager.cpp:56 CIHLDeviceManager::checkCECondition has Normal Network

23:10:02|[libNATTraver.a] info tid:1030 <Common.cpp:427>Send Request[572612796] to [121.41.5.226:8800] /online/p2psrv/2H03E30PAA00141
23:10:05|[libNATTraver.a] info tid:1030 <P2PDevice.cpp:293>get server fail, retrying...
23:10:05|[NetApp-344729] warn tid:1024 tid:1024, key dhp2p121.41.5.2268800YXQ3Mahe-5H-R1Z_2H03E30PAA001411 current status is Offline. [S                                rc/P2P/P2P.cpp:742]
23:10:05|[NetProt-372432] error tid:1017 Src/DdnsPrivateP2p.cpp:481, handle output timeout!
23:10:05|[NetApp-344729] debug tid:1017 tid:1017, CRegCliNew::msgRegister()>>>>start [Src/P2P/ASRegister.cpp:394]
23:10:05|[NetApp-344729] debug tid:1017 tid:1017, CRegCliNew::msgRegister()>>>>Timeout!Detail:ddns_timeout [Src/P2P/ASRegister.cpp:416]
23:10:05|[NetApp-344729] debug tid:1017 tid:1017, CRegCliNew::msgRegister()<<<<end [Src/P2P/ASRegister.cpp:425]
23:10:05|[NetApp-344729] debug tid:1010 tid:1010, CRegCliNew::doRegister()>>>>m_regStatus is false! [Src/P2P/ASRegister.cpp:301]

 

[marigo]

And now it runs or what, lol?...

Are you sure that wasn't a problem before aswell hahaha

Haha, no, today it just runs fine with the chinse firmware. Only the zoom with IR on was not working.

 

[cor35vet]

I don't see any errors there, does sonia even quit after that?

 

[marigo]

I have breaked sonia to copy and paste the output to this thread.
Do you mean that sonia must keep running?

Here is the output of "sonia" now: (the website is not working)

~ # sonia


[OSA-APP] OSA Build on Dec  9 2016 at 19:26:18.
[OSA-APP] SVN NUM: 7660.

[libpdi] libpdi.so Build on Nov 16 2016 at 10:44:50.
[libpdi] SVN NUM: 33929.
[libpdi] PDI product has 1 configs!!!
[libpdi] PDI product Init OK!
[libpdi] PDI hwid Get OK!
[libpdi] Get fpga upgrade cfg failed, use default
23:14:51|[pdc] The cmd 3221510146 is invalid
[libpdi] Get flash total size failed
[libpdi] Support backup partition !!!
[libpdi]  Flashtype = 3,patSize = 30000,rwSize = 10000,ersSize = 10000
[libpdi] WARN  : Device has no crypt chip!
[libpdi] phyaddr= 0x854fe000, memLen= 0x2000
23:14:51|[pdc] Both of Chief and Backup File CRC check OK!
 Fail to get env hwidEx!
[libpdi] can't find commLen cfg
23:14:51|[libenc] libenc.a svn num: 34662 compile time: Dec  8 2016 21:18:34
23:14:51|[Binder-Lib] libbinder.so Build on Dec  9 2016 at 19:28:24.
23:14:51|[Binder-Lib] SVN NUM: 3042.

23:14:51|[Binder] ERROR  (BND_nsAdd|699): duplicate entry found !
23:14:51|[Binder] ERROR  (BND_create|831): Name IENC_COM_00000000 add failed !
23:14:51|[Binder] ERROR  (BND_drvIoctl|628): Binder Create failed !
23:14:51|[Binder-Lib] ERROR  (BND_create|118): CMD_BINDER_CREATE Ioctl Failed !
23:14:51|[libenc] ERROR  (IENC_commInit|149): create binder 'IENC_COM_00000000' failed!
23:14:51|[libenc] ERROR  (ENC_constructor|151): Fail to init libenc!
23:14:51|[Unknown] warn Main.cpp 1490 tid:998 PID:966,pidName=sonia
23:14:51|[Unknown] error Main.cpp 812 tid:998 programme:sonia is already running!
23:14:51|[Binder] Process sonia(pid:998) close binder !

 

[cor35vet]

....

I meant, do: "killall sonia" to kill the autostarted sonia <- you did that right
Then run "sonia" manually <- you did that right aswell.

And then keep it running and do the motorized zoom thingy which you said will crash the camera.
And after it crashed the camera copy/paste the last output from sonia here.

 

[marigo]

Ok, that's the problem now. I can't do that because I can't login to front web page and my synology surveillance station is also disconnected.

The bootloop is still here. Exact the same as yesterday.
Configtool doens't discover the camera anymore, only telnet access at this moment. for a few seconds...This bootloop is quicker then the last time.

 

[cor35vet]

Then just let sonia run until it stops and then paste the output so I know why it stops...

 

[marigo]

Should I do the same after I have telnet access: killall sonia en then sonia again?
sorry...kinda late.

 

[cor35vet]

Yeah, "sonia" is the main application that does pretty much everything on the camera.
It is autostarted by the camera so you run "killall sonia" to stop it.
Then you run "sonia" to run it manually in your terminal so you can catch the output of it.

 

[marigo]

~ # killall sonia
~ #
~ # sonia

<deleted>

 

[cor35vet]

Your log cut off, and as I said before, I only need the last ~50 lines. Use something like Pastebin.com - #1 paste tool since 2002! or at least put the output into [code] [/code] tags.

 

[marigo]

I appreciate your support with this camera, for now I flashed the chinese firmware again to get the cam online.
If you want to help later on it would be great. Bedtime for me now. sorry.

Thanks again for your great support and time. Hopefully it will be back in english soon.

Looks like the original firmware also doesn't work. hmmmm, pitty
Flashed it again with a newer configtool manager. Now it works again.

pffff, thanks again for support.

 

[EvgenioZ]

Hi again!

Today hfw8630 arrived to me. Nice cam, but maximal 16:9 dimension is 2mp.

Is there any way to enable 16:9 3mp (or any more than 2mp) resolution as in hfw81230? I can assume that is the same camera with some different hardware markup.

Thanks.